Latest
The newest dispatches — browse everything in the archive.
Implementing Security Headers with CloudFront — Architecture and Step-by-Step Guide
CloudFront is built for latency and global delivery — but its response headers policies make it one of the cleanest ways to add a security layer to any web application running behind an ALB.
Read the article
How Browsers and Servers Talk — and Why Security Headers Matter
Before you configure a single security header, you need to understand what's happening between the browser and the server — and how a penetration test reveals where that communication is unprotected.
Ontario, Canada: Toronto, Niagara, and the Tri-Cities
Five days across Ontario, downtown Toronto, Niagara Falls, University of Waterloo, and a kayak on the Grand River, capped off with a lot of very good food.
Scanning S3 Uploads for Malware with Amazon GuardDuty
How we replaced a self-managed antivirus stack with GuardDuty's built-in Malware Protection for S3, and the upload-to-quarantine pipeline it now runs on.
A Secure SFTP Setup with AWS Transfer Family and Network Firewall
A VPC design that fronts AWS Transfer Family SFTP servers with AWS Network Firewall, so only allowlisted IPs ever reach port 22, plus the identity provider and hardening choices that go with it.
Billerica, MA: A Few Food Spots Worth Trying
Fresh-pressed juice, a seasonal tasting menu, a four-room craft beverage hall, and a few other stops from a run of meals in and around Billerica.
A Day Trip to Catalina Island
Sunrise on the ferry, a golf cart at your own pace, parasailing over the coastline, and a herd of bison, one packed day out of Long Beach and back.